I'm firmly on the side of the upgraders.
It isn't just personal data at risk, it's the internet as a whole that can be hugely impacted by large numbers of unpatched PCs with out-of-date OSes.
Fine if your Win 9x / NT4 / 2000 / XP PC is never, ever connected to the internet.
Otherwise it is putting others at risk as well.
SD